STIGQter STIGQter: STIG Summary: Google Android 9.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 23 Aug 2019:

Google Android Pie devices must have a NIAP validated Google Android Pie operating system installed.

DISA Rule

SV-106473r1_rule

Vulnerability Number

V-97369

Group Title

PP-MDF-991000

Rule Version

GOOG-09-010900

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

Install the latest released version of the Google Android Pie operating system on all managed Google devices. For Google Android Pie, version PQ3A.190605.003.A3 must be installed (it is the NIAP approved version). Note: This version of Android can only be installed on Pixel 3 devices purchased directly from Google.

Note: In Google Android devicet cases, operating system updates are released by the wireless carrier (for example, Sprint, T-Mobile, Verizon Wireless, and ATT).

Check Contents

Review device configuration settings to confirm that version PQ3A.190605.003.A3is installed (it is the NIAP approved version). Note: This version of Android can only be installed on Pixel 3 devices purchased directly from Google.

This procedure is performed on both the MDM console and the Google Android Pie device.

In the MDM management console, review the version of Google Android Pie installed on a sample of managed devices.

On the Google Android Pie device, to see the installed operating system version:
1. Open Settings.
2. Tap "About phone".
3. Verify "Build number".

If the installed version of the Android operating system on any reviewed Samsung devices is not the latest released by the wireless carrier, this is a finding.

Google's Android operating system patch website: https://source.android.com/security/bulletin/

If the installed version of the Android Pie operating system is not the NIAP approved version, this is a finding.

Vulnerability Number

V-97369

Documentable

False

Rule Version

GOOG-09-010900

Severity Override Guidance

Review device configuration settings to confirm that version PQ3A.190605.003.A3is installed (it is the NIAP approved version). Note: This version of Android can only be installed on Pixel 3 devices purchased directly from Google.

This procedure is performed on both the MDM console and the Google Android Pie device.

In the MDM management console, review the version of Google Android Pie installed on a sample of managed devices.

On the Google Android Pie device, to see the installed operating system version:
1. Open Settings.
2. Tap "About phone".
3. Verify "Build number".

If the installed version of the Android operating system on any reviewed Samsung devices is not the latest released by the wireless carrier, this is a finding.

Google's Android operating system patch website: https://source.android.com/security/bulletin/

If the installed version of the Android Pie operating system is not the NIAP approved version, this is a finding.

Check Content Reference

M

Target Key

3499

Comments